I have a critical interface, which is administratively up, and operationally down (normal state for span port monitoring). I need to create an alert to trap if the output rate (bits/sec) drops below a certain threshold.
Here is sample of the interface to demonstrate that despite line protocol (operationally) down - interface is outputting traffic. I have tried to put interface in "unpluggable" mode. Still no luck.
VH-TDC-B13-6509-1#show int gi8/48
GigabitEthernet8/48 is up, line protocol is down (monitoring)
Hardware is C6k 1000Mb 802.3, address is 0015.6305.22e7 (bia 0015.6305.22e7)
Description: MCAFEE_SPAN_PORT
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 38/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s
input flow-control is off, output flow-control is on
Clock mode is auto
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 1w5d, output hang never
Last clearing of "show interface" counters 1w5d
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 378408317
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 150032000 bits/sec, 29277 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
38716232497 packets output, 37642764730112 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
VH-TDC-B13-6509-1#